[CLSA-2026:1786980270] curl: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-18 13:08:03 UTC
Description:
- CVE-2026-8927: fix cross-proxy Digest auth state leak with env-set proxies - CVE-2026-8932: fix incomplete mTLS config matching in connection reuse
CVEs fixed:
Updated packages:
  • curl-7.19.7-59.el6.tuxcare.els18.x86_64.rpm
    sha:acbe14f0cb8afab4a57b6b82ec233ec34d1b0304835c8899f486342eb4ce7c65
  • libcurl-7.19.7-59.el6.tuxcare.els18.i686.rpm
    sha:6e8f31bf1e564e7ed7753be8cad573b754e4f8fcd0a6ece8fcb6ae83640f1650
  • libcurl-7.19.7-59.el6.tuxcare.els18.x86_64.rpm
    sha:8e6acdfb9d747786b5deac0028388afcc162f5f05c9ded34423032438c7fa3ed
  • libcurl-devel-7.19.7-59.el6.tuxcare.els18.i686.rpm
    sha:94890f0e7893c4152d2a4082022be4db9a148cf7099e368f105ce9ecc287ba3b
  • libcurl-devel-7.19.7-59.el6.tuxcare.els18.x86_64.rpm
    sha:81b97e56290dd7d6143ffe310a64f7e8570ed010fde871bbf3073685bdd4d959
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.